tfsec is a static analysis tool and security scanner for Terraform configuration files. It functions as an infrastructure as code security scanner and compliance linter designed to detect misconfigurations and vulnerabilities across multiple cloud providers before resources are deployed. The tool identifies security risks by analyzing infrastructure code and variable files to evaluate the final state of the environment. It supports custom policy enforcement and allows for the suppression of specific security warnings through inline comments. Its capabilities cover cloud security posture mana
tfsec is a static analysis tool and infrastructure as code linter designed to detect security misconfigurations and compliance violations in Terraform infrastructure code. It functions as a cloud security posture tool and policy enforcement engine that evaluates configurations against established security benchmarks. The tool provides multi-cloud security auditing for providers including AWS, Azure, Google Cloud, and Kubernetes, as well as specialized scanning for DigitalOcean, OpenStack, CloudStack, and GitHub configurations. It identifies insecure settings such as public access or unencrypt
This project is a set of git pre-commit hooks designed to automate the formatting, linting, and validation of Terraform configurations. It functions as an infrastructure as code linter, security scanner, cost estimator, and documentation generator to ensure code quality before commits are finalized. The tool distinguishes itself by providing specialized capabilities for infrastructure workflows, such as scanning templates for security vulnerabilities and hardcoded secrets, calculating projected cloud spending against budgets, and automatically extracting module definitions to populate readme
Phan is a static analyzer and type checker for PHP that identifies bugs and type incompatibilities without executing the code. It serves as a quality gate for continuous integration pipelines and a tool for verifying type safety, specifically checking union types, generics, and array shapes. The project is distinguished by its use of a background daemon and Language Server Protocol implementation, which provide real-time diagnostics and navigation within editors. It also features a baseline-based suppression system that allows developers to record existing errors in a snapshot file to focus e
TFLint एक स्टेटिक एनालिसिस टूल और इंफ्रास्ट्रक्चर-एज़-कोड वैलिडेटर है, जिसे Terraform कॉन्फ़िगरेशन फ़ाइलों में गलतियों की पहचान करने और बेस्ट प्रैक्टिसेज लागू करने के लिए डिज़ाइन किया गया है। यह ऑटोमेटेड वर्कफ़्लो के लिए एक क्वालिटी गेट के रूप में कार्य करता है और एक लैंग्वेज सर्वर है जो सपोर्टेड टेक्स्ट एडिटर्स में सीधे रियल-टाइम डायग्नोस्टिक्स और लिंटिंग एरर्स प्रदान करता है।
terraform-linters/tflint की मुख्य विशेषताएं हैं: Terraform Analyzers, Infrastructure as Code Tools, Language Server Protocol Implementations, Infrastructure Configuration Analysis, Infrastructure as Code Practices, Infrastructure Configuration Validations, Provider-Specific Validation Rules, External Validation Rule Sets।
terraform-linters/tflint के ओपन-सोर्स विकल्पों में शामिल हैं: liamg/tfsec — tfsec is a static analysis tool and security scanner for Terraform configuration files. It functions as an… aquasecurity/tfsec — tfsec is a static analysis tool and infrastructure as code linter designed to detect security misconfigurations and… antonbabenko/pre-commit-terraform — This project is a set of git pre-commit hooks designed to automate the formatting, linting, and validation of… phan/phan — Phan is a static analyzer and type checker for PHP that identifies bugs and type incompatibilities without executing… bridgecrewio/checkov — Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as… dequelabs/axe-core — axe-core is an automated accessibility testing engine and compliance auditor designed to scan web and mobile…